Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa
File: a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa (raw, json)
Hash identifier: eS5yK9y8BcGJauxNvPAyxMmSbK0LS0ruo4zxX1FZVpY=
Subject key identifier: 13:7A:F5:72:73:F1:C4:20:FF:5D:C3:5B:F8:E6:30:84:AF:21:D0:04
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A7ABA7AB0E198E5F16310
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:7a:ba:7a:b0:e1:98:e5:f1:63:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=cc483536-b276-4e23-aa5b-c952d05e10f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:be:77:f0:e4:da:c6:23:3a:3c:61:e6:94:73:
9d:11:0b:d1:e2:d1:ba:7c:cf:e5:9c:54:c3:9c:25:
3b:7d:e6:3c:ae:54:50:36:cf:4d:ab:24:39:20:d8:
5e:59:09:4d:94:d2:99:58:c0:cb:1d:52:47:bc:72:
b6:3e:1a:f0:22:ad:13:54:85:39:d7:04:24:2b:97:
2d:11:e3:37:66:88:c9:50:8f:4f:b0:6a:a5:7d:be:
b8:23:7e:a7:9a:e3:c9:9b:57:e2:fd:a3:1e:4b:54:
07:ee:49:49:7f:ae:81:30:aa:d2:17:8d:77:aa:aa:
b3:e1:22:c3:c0:b8:28:29:e9:5a:0b:dc:78:72:3b:
8e:16:25:e1:67:5d:e7:f5:db:a5:1a:9d:13:28:a5:
8f:69:4e:bf:f4:a5:9e:86:22:f4:17:b9:20:0e:d8:
a1:e7:1f:7b:98:11:97:a2:3e:f7:46:d4:ef:b6:76:
dc:86:0e:1b:67:c6:d8:2e:51:1e:36:7f:e2:b6:c0:
6c:89:72:4c:c0:fe:8b:73:e8:be:2b:da:64:b2:7f:
d5:3d:8e:fa:64:cc:11:b5:db:31:86:f0:34:a5:82:
a5:4b:f0:8c:4c:e2:03:87:53:86:e9:7c:bd:24:5b:
bb:f6:81:60:2b:d1:01:2e:c8:8e:55:ab:c6:6e:08:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7A:F5:72:73:F1:C4:20:FF:5D:C3:5B:F8:E6:30:84:AF:21:D0:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:64:fb:e4:5a:7a:6c:d4:2f:db:d1:68:de:52:58:4e:85:9a:
4e:f0:a5:47:d0:06:7a:e7:e1:ad:ed:ab:07:c9:fc:1e:90:ba:
6f:a8:e4:69:f7:38:ca:57:45:4b:d8:ea:bf:bf:d4:3f:ad:dd:
a5:70:2e:01:6f:8b:94:48:d1:60:52:fe:83:5f:79:b9:58:38:
ec:02:e3:2c:1a:df:18:03:7c:96:3a:13:c1:61:90:17:b9:1b:
01:fe:6b:1d:b4:47:d8:0a:89:bf:8c:ee:b9:63:8d:be:25:ef:
38:17:92:4a:69:2a:29:c7:50:c8:ff:bb:c9:28:0a:f3:99:e6:
a9:d6:39:ca:2b:d8:ed:15:78:e0:e9:76:91:e6:55:7c:67:0d:
48:5f:1b:58:24:da:10:9b:70:85:41:81:31:09:35:9f:ea:05:
13:a8:0f:78:7c:38:35:1f:97:57:07:cd:cb:4c:c7:ce:d6:50:
b4:94:8e:91:70:98:95:e9:9a:a9:ce:f0:2d:6f:39:18:87:1e:
5f:f6:b9:94:dd:d3:a7:f3:15:e9:7b:af:ba:a2:11:b9:a4:7b:
f1:a0:7f:87:da:1f:b9:8a:25:0b:47:ce:05:c1:28:a5:44:28:
47:a5:38:df:fd:1a:c5:2b:64:07:62:7c:ca:3a:c9:43:90:35:
d9:c0:0d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:50:59 2025 by rpki-client